CVE-2026-2171: code-projects Online Student Management System Login accounts.php sql injection
A vulnerability was found in code-projects Online Student Management System 1.0. Affected is an unknown function of the file accounts.php of the component Login. Performing a manipulation of the argument username/password results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2171?
CVE-2026-2171 is a critical SQL injection vulnerability that can lead to unauthorized access and data compromise.
How do I fix CVE-2026-2171?
To fix CVE-2026-2171, sanitize and validate user inputs in the accounts.php file and implement prepared statements for database queries.
Which component of the Online Student Management System is affected by CVE-2026-2171?
CVE-2026-2171 affects the Login component, specifically the accounts.php file.
Can CVE-2026-2171 allow attackers to execute arbitrary SQL commands?
Yes, CVE-2026-2171 allows attackers to manipulate SQL queries and potentially execute arbitrary SQL commands.
What systems are at risk due to CVE-2026-2171?
Any installation of the code-projects Online Student Management System version 1.0 is at risk due to CVE-2026-2171.